Nagios XI Multiple Remote Security Vulnerabilities
BID:57672
Info
Nagios XI Multiple Remote Security Vulnerabilities
| Bugtraq ID: | 57672 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 02 2013 12:00AM |
| Updated: | Feb 02 2013 12:00AM |
| Credit: | James Clawson |
| Vulnerable: |
Nagios Nagios XI 2012R1.5b |
| Not Vulnerable: | |
Discussion
Nagios XI Multiple Remote Security Vulnerabilities
Nagios XI is prone to multiple security vulnerabilities, including:
1. A cross-site scripting vulnerability
2. An HTML injection vulnerability
3. A command-execution vulnerability
4. An SQL-injection vulnerability
5. A cross-site request-forgery vulnerability
6. A content spoofing vulnerability
7. A remote file-include vulnerability
Attackers can leverage these issues to execute arbitrary HTML and script code in the browser of an unsuspecting user in the context of an affected application, steal cookie-based authentication credentials, perform phishing attacks, execute arbitrary local scripts and commands, perform unauthorized actions, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. Other attacks are also possible.
Nagios XI 2011R1.9 is vulnerable; other versions may also be affected.
Nagios XI is prone to multiple security vulnerabilities, including:
1. A cross-site scripting vulnerability
2. An HTML injection vulnerability
3. A command-execution vulnerability
4. An SQL-injection vulnerability
5. A cross-site request-forgery vulnerability
6. A content spoofing vulnerability
7. A remote file-include vulnerability
Attackers can leverage these issues to execute arbitrary HTML and script code in the browser of an unsuspecting user in the context of an affected application, steal cookie-based authentication credentials, perform phishing attacks, execute arbitrary local scripts and commands, perform unauthorized actions, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. Other attacks are also possible.
Nagios XI 2011R1.9 is vulnerable; other versions may also be affected.
Exploit / POC
Nagios XI Multiple Remote Security Vulnerabilities
Attackers can use a browser to exploit these issues. To exploit the cross-site request forgery and cross-site scripting issues, an attacker must entice an unsuspecting user into following a malicious URI.
The following example URIs are available:
Attackers can use a browser to exploit these issues. To exploit the cross-site request forgery and cross-site scripting issues, an attacker must entice an unsuspecting user into following a malicious URI.
The following example URIs are available:
Solution / Fix
Nagios XI Multiple Remote Security Vulnerabilities
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Nagios XI Multiple Remote Security Vulnerabilities
References:
References:
- Multiple Vulnerabilities: Nagios XI 2012R1.5b (temp66 )
- Nagios Homepage (Nagios)